Filtered by vendor Totolink Subscriptions
Filtered by product Cp300\+ Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-34669 1 Totolink 2 Cp300\+, Cp300\+ Firmware 2024-10-31 7.5 High
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
CVE-2023-36952 1 Totolink 2 Cp300\+, Cp300\+ Firmware 2024-09-16 9.8 Critical
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
CVE-2023-36953 1 Totolink 2 Cp300\+, Cp300\+ Firmware 2024-09-16 9.8 Critical
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
CVE-2023-36954 1 Totolink 2 Cp300\+, Cp300\+ Firmware 2024-09-16 9.8 Critical
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
CVE-2023-36955 1 Totolink 2 Cp300\+, Cp300\+ Firmware 2024-09-16 9.8 Critical
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
CVE-2023-31856 1 Totolink 2 Cp300\+, Cp300\+ Firmware 2024-08-02 9.8 Critical
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.